[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[rt.debian.org #1132] future of crest and kullervo

On Thu, 19 Feb 2009, Stephen R Marenka wrote:

> On Thu, Feb 19, 2009 at 11:50:43AM +0100, Peter Palfrader wrote:
> > We can still export parts of ud-ldap (i.e. accounts and ssh keys, no
> > passwords) to you, so you can keep it maintainer accessible, but DSA
> > will not maintain an m68k project machine anymore.
> So what do we need to do to get those parts of ud-ldap setup?

Probably the stuff that needs to happen is
- coordinate with/get ok of local-admin/sponsor,
- get new hostnames, most likely the best choice are kullervo.debian.net
  and crest.debian.net, so some DD needs to register those in ldap,
- make sure you can access the system and root without any debian
  ldap/unix and sudo password,
- tell DSA to switch over the ud-generate config for both hosts
  to something like we do for alioth,
  i.e. the accounts will still all exist but we will no longer
  export passwords.
  alioth merges the data somehow, I suppose you could just
  continue using libnss-db until you need to change stuff.
- clean up the hosts to not send mail to debian-admin etc,
- remove debian-admin's privileged access (sudo and ssh to root)
- announce to -68k and -project

                           |  .''`.  ** Debian GNU/Linux **
      Peter Palfrader      | : :' :      The  universal
 http://www.palfrader.org/ | `. `'      Operating System
                           |   `-    http://www.debian.org/

Reply to: